How to Handle Unsanctioned AI Tool Use at Your Company